$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa File: 5ffd159f-4992-32fc-a662-70d42206aa8c.roa (raw, json) Hash identifier: UcBBcaw7EptTl+bftv5xxu/y4/cFHQwFmuPFcfXMrUk= Subject key identifier: B3:7C:C3:CB:02:B8:74:D9:C2:95:30:77:E2:46:4F:9C:71:DF:44:99 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584EA787403C71416A1F0E7976C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 149440 IP address blocks: 166.88.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:40:3c:71:41:6a:1f:0e:79:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=152da3e5-3aed-4951-9e7a-d906c4a3cb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:15:04:16:bb:62:d2:e1:1c:fc:f1:bd:9b:42: 02:98:59:58:97:c0:d7:87:ad:69:f1:c1:b0:51:f8: 30:9f:44:de:36:74:c2:5f:80:55:1d:54:fc:b6:34: 13:59:69:44:c1:71:66:28:0b:81:27:c5:b5:5e:4a: 17:1e:47:0c:c6:32:09:b4:5f:d8:df:06:34:1f:5e: 5f:33:b0:47:8a:df:dd:ce:0e:07:f4:98:6a:d0:46: ff:39:f0:cf:8e:5f:41:ca:97:52:ec:71:0c:96:3f: 3e:9b:14:69:6a:f7:e6:50:b3:93:00:f9:9f:8a:04: 91:5e:a2:f9:3d:5a:1f:0a:2b:f6:bb:37:9d:35:9d: 16:9b:c7:52:42:2f:42:06:9e:88:a4:d6:c1:eb:ac: 3b:00:a6:40:56:b5:9a:20:31:4c:5c:67:c7:55:b0: 4a:29:f9:ca:31:57:c0:c0:23:57:a9:bf:4a:02:47: a1:2c:30:76:d3:6b:db:b3:b6:df:a9:1d:97:e9:14: 39:6a:f1:05:79:19:b2:f9:dd:cf:1a:33:6a:4a:e3: 99:42:9d:f9:1b:e8:8c:a9:12:6d:3b:f4:75:1e:b8: 00:df:ec:bd:49:87:28:45:37:f6:16:15:a8:0b:2c: 44:79:24:c3:49:f5:e5:3a:70:de:82:36:5f:2e:c0: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7C:C3:CB:02:B8:74:D9:C2:95:30:77:E2:46:4F:9C:71:DF:44:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5ffd159f-4992-32fc-a662-70d42206aa8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 166.88.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:54:11:03:e7:2d:d4:b2:03:b1:96:14:16:43:40:1e:cb:01: d5:14:b1:8d:97:56:b6:37:52:61:60:f9:08:db:10:c0:e5:4d: 34:0e:5b:16:64:55:5e:31:7f:12:52:a2:62:4a:08:2b:13:5e: 00:14:84:57:a7:da:ad:99:ce:ca:59:24:b2:d3:b8:08:a0:d5: 9e:4f:ba:0d:d7:9f:82:72:46:67:f5:39:06:cd:bc:34:10:8b: ee:f4:bc:0a:f4:f2:06:ad:b1:92:be:c8:83:6d:bb:5e:df:98: c1:dd:18:bf:91:6d:12:ee:21:03:15:fe:fc:3b:e1:02:74:01: 94:d8:98:a1:7a:fc:02:1c:8d:4b:35:6b:88:a7:39:46:0b:fe: b0:bc:c0:58:6a:95:dd:b7:89:fe:b1:74:bc:c8:ec:68:71:15: c6:e6:76:70:72:fe:7d:66:d6:1d:78:c1:3a:8d:75:34:6a:1d: e9:13:95:98:6a:19:d2:4f:6e:46:5d:66:10:b8:29:6b:f0:de: 81:28:de:48:1a:ed:33:d9:db:4c:72:03:79:cd:b6:bb:af:f4: ad:5d:4f:62:52:34:7e:99:88:3e:0c:9f:db:f4:a9:cf:15:de: 25:26:51:54:4f:1f:ff:41:af:c9:6d:12:50:00:84:36:51:da: 1b:4f:ca:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh0A8cUFqHw55dsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTUyZGEzZTUtM2FlZC00OTUxLTllN2EtZDkwNmM0YTNjYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBUEFrti0uEc/PG9m0ICmFlYl8DXh61p8cGw Ufgwn0TeNnTCX4BVHVT8tjQTWWlEwXFmKAuBJ8W1XkoXHkcMxjIJtF/Y3wY0H15f M7BHit/dzg4H9Jhq0Eb/OfDPjl9BypdS7HEMlj8+mxRpavfmULOTAPmfigSRXqL5 PVofCiv2uzedNZ0Wm8dSQi9CBp6IpNbB66w7AKZAVrWaIDFMXGfHVbBKKfnKMVfA wCNXqb9KAkehLDB202vbs7bfqR2X6RQ5avEFeRmy+d3PGjNqSuOZQp35G+iMqRJt O/R1HrgA3+y9SYcoRTf2FhWoCyxEeSTDSfXlOnDegjZfLsD91QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLN8w8sCuHTZwpUwd+JGT5xx30SZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWZmZDE1OWYtNDk5Mi0z MmZjLWE2NjItNzBkNDIyMDZhYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAplgCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlUEQPnLdSyA7GWFBZDQB7LAdUUsY2XVrY3UmFg+QjbEMDlTTQOWxZk VV4xfxJSomJKCCsTXgAUhFen2q2ZzspZJLLTuAig1Z5Pug3Xn4JyRmf1OQbNvDQQ i+70vAr08gatsZK+yINtu17fmMHdGL+RbRLuIQMV/vw74QJ0AZTYmKF6/AIcjUs1 a4inOUYL/rC8wFhqld23if6xdLzI7GhxFcbmdnBy/n1m1h14wTqNdTRqHekTlZhq GdJPbkZdZhC4KWvw3oEo3kga7TPZ20xyA3nNtruv9K1dT2JSNH6ZiD4Mn9v0qc8V 3iUmUVRPH/9Br8ltElAAhDZR2htPyoA= -----END CERTIFICATE-----Generated at Thu Aug 27 16:07:46 2026 by rpki-client